Windows

Windows / Intune – Windows 11 26H2 will have Windows Backup enabled by default

There has been a new Windows feature introduced few months ago called Windows Backup. Windows Backup is feature to allow streamlining devices transition during replacement process by backing up user settings and Microsoft Store app configurations. This feature has been turned off by default so far but with the incoming Windows 11 26H2 release later

Windows / Intune – Windows 11 26H2 will have Windows Backup enabled by default Read More »

Intune – You can now inventory registry keys

If you are managing client devices with Intune, you already know that you can inventory these devices to know their physical details, from battery type or level to video controllers. This inventory is done by implementing the Properties catalog configuration profile type. Well, this profile has been updated to allow you to also inventory registry

Intune – You can now inventory registry keys Read More »

Defender – Assess Secure Boot certificate expiration status Defender

With the Secure Boot certificate expiration date fast approaching (June 2026), Microsoft has released a new recommendation in Microsoft Defender to assist assessing the readiness of your environment. Off course, this means devices (either client or server) must be onboarded onto Microsoft Defender, which can be done either with Intune for clients or scripts or

Defender – Assess Secure Boot certificate expiration status Defender Read More »

Windows – Enable Secure Boot certificate updates

As you know, Microsoft has introduced Secure Boot with Windows 8 (2011) and has become more important with Windows 10 and Windows 11 (this is even a prerequisites). Well, in June 2026 (as announced in November 2025 Secure Boot playbook for certificates expiring in 2026) certificates used by Secure Boot are going to expire. You

Windows – Enable Secure Boot certificate updates Read More »

Intune – Remove preinstalled Windows Store apps

As IT administrator, you may want/need to remove preinstalled/default Windows Store apps (such as Solitaire, Feedback hub or Clipchamp). Until now, you had either to use script or deploy these applications from Intune in uninstall mode. Unfortunately, this does not block end-user to install again these applications (even if they eventually will be uninstalled again).

Intune – Remove preinstalled Windows Store apps Read More »

Exchange / AD – Heads up Exchange and Active Directory administrators, AD extension issue

Well, even if it has been generally available for months, seems Windows Server 2025 is in fact still not yet ready for production use. After multiple core services issues, from DHCP services to authentication with Windows Hello, we now have a new issue which is impacting another system, in this case Exchange server on-premises. As

Exchange / AD – Heads up Exchange and Active Directory administrators, AD extension issue Read More »

Windows – Windows 11 25H2 is now available

Windows 11 25H2 is now available from Intune, My Visual Studio (aka MSDN), SCCM Software Update/WSUS but apparently not yet through Windows Update.   You can learn about known issues from there Windows 11, version 25H2 known issues and notifications | Microsoft Learn As part of the improvements: Support for Wi-Fi 7 for enterprise connectivity

Windows – Windows 11 25H2 is now available Read More »

Windows / Intune – Phone Link has been blocked by your system administrator

Phone Link, previously known as Your Phone, is a Windows app that allows connecting Android or iOS phones to Windows computers. It enables access and manage various phone features directly from their PC, such as texts, calls, notifications, and photos. Well, recently, I faced the “This feature has been blocked by your system administrator” error

Windows / Intune – Phone Link has been blocked by your system administrator Read More »

Intune / Windows – Hotpatching now enabled by default for new Windows quality update policies

By now, you are probably aware about the hotpatching for Windows 11 and Windows Server (see Hotpatch updates | Microsoft Learn and Hotpatch for Windows Server | Microsoft Learn). As hotpatch has been available for Windows 11 clients for few months already, Microsoft has announced that it will now be enable by default for all

Intune / Windows – Hotpatching now enabled by default for new Windows quality update policies Read More »

Intune – Changes in supported OS architecture for Win32 apps

If you are using to manage your client devices fleet, you already know that you can package and deploy custom Windows applications (aka Win32 apps). When deploying this type of application, you have to define the supported Windows architecture (x86 or x64) and version. Well, good news as there has been few changes to configure

Intune – Changes in supported OS architecture for Win32 apps Read More »